public class PermitEmptyRolesConstraint extends AbstractConstraint
Constructor and Description |
---|
PermitEmptyRolesConstraint(boolean permit) |
Modifier and Type | Method and Description |
---|---|
AuthorizationResult |
isAuthorized(HttpServletRequest request,
HttpServletResponse response,
ServletContext application)
Returns true if the user is authorized for the resource.
|
isPrivateCache, needsAuthentication, toArray
public AuthorizationResult isAuthorized(HttpServletRequest request, HttpServletResponse response, ServletContext application) throws ServletException, java.io.IOException
AbstractConstraint
isAuthorized must provide the response if the user is not authorized. Typically this will just call sendError.
isAuthorized will be called after all the other filters, but before the servlet.service().
isAuthorized
in class AbstractConstraint
request
- the servlet requestresponse
- the servlet responseServletException
java.io.IOException